HTTP Headers Analysis for https://cockroachlabs.cloud

Detected Technologies from Headers

See all in URL Inspect 21

Adobe Marketo

Chameleon

ClearBit

Datadog

Google Analytics

Google Cloud Run

Google DoubleClick

Google Fonts

Google reCAPTCHA

Google Search

Google Static File Front End

Google Tag Manager

Heroku

jsDelivr

Kapa AI

MadKudu

OneTrust

Segment

Statuspage

Stripe

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

default-src; connect-src; script-src; +5 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

connection: close
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate

cache-control: no-store, no-cache, max-age=0, must-revalidate, proxy-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Date

Other

Mon, 27 Apr 2026 12:47:08 GMT

Via

Other

1.1 google

alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
date: Mon, 27 Apr 2026 12:47:08 GMT
via: 1.1 google

Recommendations

Enable compression (gzip/brotli) to improve performance